Go/github.com/artifacthub/hub CVE-2023-45822: unknown, EPSS 0.64%
Artifact Hub allows unsafe rego built-in in github.com/artifacthub/hub
Action: Upgrade github.com/artifacthub/hub to 1.16.0 or later.
go get github.com/artifacthub/hub@v1.16.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.16.0 | - |
Fixed versions
| 1.16.0 |
Sources
- osv: GO-2023-2134
- https://github.com/artifacthub/hub/security/advisories/GHSA-9pc8-m4vp-ggvf
- https://nvd.nist.gov/vuln/detail/CVE-2023-45822
- https://artifacthub.io/packages/helm/artifact-hub/artifact-hub?modal=changelog&version=1.16.0
- https://www.openpolicyagent.org
- https://www.openpolicyagent.org/docs/latest/#rego
CVE-2023-45822 · published · modified · JSON